Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/DLpLo5LMD7YWcUHAQjVvDWdbiK8.roa
File: DLpLo5LMD7YWcUHAQjVvDWdbiK8.roa (raw, json)
Hash identifier: 11WsO2Krb/doO0lI8dbumD9AMIjAFPgqNFO+De7OT40=
Subject key identifier: 0C:BA:4B:A3:92:CC:0F:B6:16:71:41:C0:42:35:6F:0D:67:5B:88:AF
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0185AFA8232366F50F83AA944C82B62F9689
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/DLpLo5LMD7YWcUHAQjVvDWdbiK8.roa
Signing time: Sat 14 Jan 2023 09:41:49 +0000
ROA not before: Sat 14 Jan 2023 09:41:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 176.46.138.0/23 maxlen: 24
94.74.190.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:af:a8:23:23:66:f5:0f:83:aa:94:4c:82:b6:2f:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 14 09:41:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cba4ba392cc0fb6167141c042356f0d675b88af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7b:c3:a2:3d:82:5c:da:4b:4c:4c:26:c0:9d:
f5:ba:f9:55:ed:71:09:aa:a5:7c:41:31:37:01:d0:
6f:b8:53:98:ca:7a:08:2f:09:88:cd:8d:28:5f:a4:
af:70:5b:97:6f:85:1f:89:1b:d7:cf:c2:d6:a7:de:
64:a1:1a:ea:f4:7b:5a:2e:d3:1d:e8:80:d4:01:fa:
73:f8:b0:ee:c0:ef:37:56:94:28:00:48:4b:74:ef:
54:0b:bb:a4:78:68:a5:15:77:bf:4d:a3:35:52:c4:
8c:8f:83:d7:49:68:61:1a:84:67:71:41:6f:ab:3b:
db:ba:31:63:35:be:32:3e:be:57:82:77:87:51:ea:
8f:d4:e2:1f:03:f3:cd:66:fa:e2:08:d1:a9:1e:f0:
18:d3:b0:e5:f8:4f:61:5d:e9:a9:03:9c:4e:dc:1d:
d7:5f:21:0d:09:74:5c:58:11:1a:e5:f7:2c:b1:f0:
df:34:dc:c5:6b:64:dd:db:ea:c5:e6:f6:08:0b:19:
fc:bb:eb:10:8d:81:47:cb:de:27:79:4d:f9:f3:ca:
5d:b9:84:dc:20:41:95:9c:f9:a5:58:0c:ea:5b:8e:
79:fd:12:94:a7:4b:1b:53:21:3e:e8:47:8c:20:ef:
ad:3c:c7:32:75:4b:f1:c5:75:c8:dc:49:db:0c:3c:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:4B:A3:92:CC:0F:B6:16:71:41:C0:42:35:6F:0D:67:5B:88:AF
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/DLpLo5LMD7YWcUHAQjVvDWdbiK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.138.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:73:84:fb:46:29:66:b8:d8:03:54:ae:b7:0e:ed:69:f6:c7:
71:0c:ca:8d:67:43:43:28:a8:5d:8d:79:d2:1c:87:6b:75:26:
96:9b:df:35:f4:3e:0d:16:d1:d5:d5:85:1d:48:4a:ef:3d:91:
e7:3f:5a:e9:37:b6:63:95:2c:fc:88:54:16:c2:d6:ec:5c:bf:
f0:5c:48:13:72:81:e7:30:4b:5a:d1:87:85:ce:24:64:24:65:
09:b1:ee:dd:e4:6c:79:a0:e4:96:3e:11:06:34:28:7b:1e:85:
86:00:cf:37:71:7e:c4:62:ce:73:92:1f:d5:79:56:03:a9:b6:
1d:bc:30:37:04:9f:64:ae:52:64:cd:96:56:f5:7f:da:24:dd:
f6:63:08:43:ab:30:8c:84:d8:3a:9d:e5:68:0e:9f:ea:d1:9b:
7b:a6:0d:ab:3a:6d:3c:aa:51:64:20:ed:db:84:33:a1:b3:c3:
8e:d5:b9:ec:11:15:8f:e0:31:41:12:cb:cf:c5:39:45:ce:68:
ca:ee:5d:62:d3:40:a7:ad:27:bb:6f:c6:96:3a:f3:a9:48:76:
80:fa:f3:48:50:f6:eb:28:e7:6c:13:6b:8c:6d:55:18:a4:62:
7c:06:14:57:af:18:1f:33:3b:0b:da:60:ba:27:b2:cb:b2:3c:
60:75:e5:6c
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYWvqCMjZvUPg6qUTIK2L5aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwMTE0MDk0MTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2JhNGJhMzkyY2MwZmI2MTY3MTQxYzA0MjM1NmYwZDY3NWI4OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXvDoj2CXNpLTEwmwJ31uvlV7XEJ
qqV8QTE3AdBvuFOYynoILwmIzY0oX6SvcFuXb4UfiRvXz8LWp95koRrq9HtaLtMd
6IDUAfpz+LDuwO83VpQoAEhLdO9UC7ukeGilFXe/TaM1UsSMj4PXSWhhGoRncUFv
qzvbujFjNb4yPr5XgneHUeqP1OIfA/PNZvriCNGpHvAY07Dl+E9hXempA5xO3B3X
XyENCXRcWBEa5fcssfDfNNzFa2Td2+rF5vYICxn8u+sQjYFHy94neU3588pduYTc
IEGVnPmlWAzqW455/RKUp0sbUyE+6EeMIO+tPMcydUvxxXXI3EnbDDw+hQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFAy6S6OSzA+2FnFBwEI1bw1nW4ivMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvRExwTG81TE1EN1lXY1VIQVFqVnZEV2RiaUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQEH6owAwQG
XkqAAwQFbcugMAwDBAGwLooDBAWwLoADBAK5IqAwDQYJKoZIhvcNAQELBQADggEB
AJ1zhPtGKWa42ANUrrcO7Wn2x3EMyo1nQ0MoqF2NedIch2t1Jpab3zX0Pg0W0dXV
hR1ISu89kec/Wuk3tmOVLPyIVBbC1uxcv/BcSBNygecwS1rRh4XOJGQkZQmx7t3k
bHmg5JY+EQY0KHsehYYAzzdxfsRiznOSH9V5VgOpth28MDcEn2SuUmTNllb1f9ok
3fZjCEOrMIyE2Dqd5WgOn+rRm3umDas6bTyqUWQg7duEM6Gzw47VuewRFY/gMUES
y8/FOUXOaMruXWLTQKetJ7tvxpY686lIdoD680hQ9uso52wTa4xtVRikYnwGFFev
GB8zOwvaYLonssuyPGB15Ww=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:42 2025 by rpki-client